When a Trusted Agent is removed for cause, who is notified by the RA?

• A. The subscriber
• B. The organizational commander
• C. The security officer
• D. The vendor

Answer: (D)

When a Trusted Agent is removed for cause, the party that issued and manages the Trusted Agent’s credentials—typically the vendor—must be notified. The Responsible Authority informs the vendor so they can immediately revoke the agent’s access, disable credentials across systems, and update records or reissue credentials as needed. This keeps the trust relationship clean and prevents any lingering access.

Notifying the subscriber or the organizational commander isn’t the formal step for credential revocation, and while internal security staff play a role in incident response, the essential action is to alert the vendor who controls the agent’s credentials.